Showing papers by "Thales (Netherlands) published in 2015"

A Study of Preventing Email (Spear) Phishing by Enabling Human Intelligence

Abstract: Cyber criminals use phishing emails in high-volume and spear phishing emails in low volume to achieve their malicious objectives. Hereby they inflict financial, reputational, and emotional damages on individuals and organizations. These (spear) phishing attacks get steadily more sophisticated as cyber criminals use social engineering tricks that combine psychological and technical deceptions to make malicious emails as trustworthy as possible. Such sophisticated (spear) phishing emails are hard for email protection systems to detect. Security researchers have studied users' ability to perceive, identify and react upon email (spear) phishing attacks. In this study we have surveyed recent works on understanding how to prevent end-users from falling for email (spear) phishing attacks. Based on the survey we design and propose a novice method that combines interaction methods of reporting, blocking, warning, and embedded education to harness the intelligence of expert and novice users in a corporate environment in detecting email (spear) phishing attacks. We evaluate the design based on a qualitative study, in three experimental steps, by using a mockup prototype, and with 24 participants. We report on the insights gained, indicating that the proposed combination of the interaction methods is promising, and on future research directions.

Using an in-line uninterruptable power supply as TEMPEST ‘filter’ for naval vessels

Abstract: A major objective of TEMPEST engineering is to separate equipment carrying classified (=RED) data from equipment carrying unclassified (=BLACK) data, to prevent unintentional radio or electrical signals, containing classified data, emission. RED/BLACK separation in the power supply system is in general achieved by adding TEMPEST filters, but on board naval vessels the power system is insulated and the use of filter capacitances is limited. Solid-state uninterruptable power supplies (UPS) create isolation, because of the AC/DC and DC/AC conversion and associated internal filtering. Measurements have been performed on an operational UPS to determine the a-symmetrical, symmetrical and non-symmetrical isolation. The results obtained from the UPS tested show very good isolation which, combined with the already installed power line filters inside equipment, will be more than adequate to achieve the required isolation for RED/BLACK separation.

Effect of gland quality on the screening effectiveness of cable-connector assemblies

Abstract: An extensive number of standards provide various transfer impedance requirements and test methods for individual cables, but just a few are related to connectors. Only two standards describe how to test cable-gland-connector-receptacle assemblies. The cable-gland-connector-receptacle assembly has significant effects on the total considered impedance chain. In general the supplier for cable, gland and connector is different. For the introduction of commercial off the shelf connectors tests were performed on connectors and cable-connector sets, and inconsistent results were observed, showing extremely high transfer impedance, thus poor screening effectiveness. It is shown that the transfer impedance of such glands is greatly dependent on its shape, and how glands are mounted.

Using preloading to protect bearings against lightning damage

Abstract: When a radar system onboard a ship is struck by lightning the current has to be conducted via defined paths to prevent damage. A key element to protect is the bearing system between the rotating and stationary part. The conventional way of protecting bearing is to provide a bypass current path via additional measures such as a slip ring. The main cause of damage to the bearing system is the arcing due to high voltage difference between rollers and raceway. It is commonly assumed that, if the radar is rotating, the lubrication between the rolling elements and the raceway is a non-electrical conducting hydrodynamic lubrication layer, and high voltages can be developed. But if the bearing is sufficiently preloaded it is still providing a conductive path via boundary lubrication. No arcing occurs, and no damage. The concept of pre-loading the bearing system has been evaluated using many experiments on stationary and rotating bearings, and after performing endurance testing.